Skip to main content
VulnerabilityPublished Updated

apress_validators (RubyGems) · Malicious Code

Affects apress_validatorsSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 19 Jul 2026, 01:01 UTC

What to do

Affected software

ProductAffectedFixed in
RubyGemsapress_validatorspkg:gem/apress_validatorsOther threatsAffected
  • =0.1.0
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Avoid using the 'apress_validators' package version 0.1.0. Remove any installations of this package from your environment. Monitor dependency sources and use trusted repositories to prevent inclusion of malicious packages.

Description

The RubyGems package 'apress_validators' version 0.1.0 contains malicious code as identified by the OpenSSF malicious packages project. This package is flagged as a malicious package rather than a traditional vulnerability. No patch or remediation is currently documented.

References

Community reviews

Loading reviews…